CVE-2018-18820

Name of the Vulnerable Software and Affected Versions Icecast versions prior to 2.4.4

Description A buffer overflow was discovered in the URL-authentication backend. If the backend is enabled, any malicious HTTP client can send a request for a specific resource including a crafted header, leading to denial of service and potentially remote code execution.

Recommendations For versions prior to 2.4.4, update to version 2.4.4 or later to resolve the issue. As a temporary workaround, consider disabling the URL-authentication backend until a patch is available.